This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RdXUKHxz7A0WWw7WXLIdifMPPXo.roa File: RdXUKHxz7A0WWw7WXLIdifMPPXo.roa (raw, json) Hash identifier: Kz/mFCen4oQ+EGQZeoHdXyCQSJLs9xmXFjt3ax9LEDU= Subject key identifier: 45:D5:D4:28:7C:73:EC:0D:16:5B:0E:D6:5C:B2:1D:89:F3:0F:3D:7A Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F851F0B4A30F6E6279D1D0887653915 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RdXUKHxz7A0WWw7WXLIdifMPPXo.roa Signing time: Fri 02 Jan 2026 16:23:09 +0000 ROA not before: Fri 02 Jan 2026 16:23:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215539 IP address blocks: 93.170.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1f:0b:4a:30:f6:e6:27:9d:1d:08:87:65:39:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45d5d4287c73ec0d165b0ed65cb21d89f30f3d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:45:bc:2b:ec:a1:46:e4:fe:47:83:fa:dc: 6e:5b:b4:38:75:ba:8a:26:65:4b:0c:0f:55:e6:fe: a8:b5:ee:3c:aa:72:c3:5d:d9:c8:07:61:b8:ce:53: 7a:48:44:31:6e:b9:a9:cf:fc:c0:8f:44:bb:f7:03: 97:b6:44:4c:66:b4:fe:10:69:d7:64:25:e1:70:a7: 69:0c:c5:d6:82:1e:7c:8b:a4:37:ed:6f:88:0a:55: 2b:2b:1a:9f:7e:87:2d:1c:2b:a7:e1:a9:cb:a4:8e: e6:6d:c2:25:59:72:77:21:fd:5d:07:ac:71:cb:f8: 15:ed:f4:4a:46:ab:eb:59:a5:8b:9a:8e:ae:5b:2d: 60:69:f5:d7:96:a8:b2:19:9d:3e:33:c9:31:d8:f0: 70:46:44:08:a5:61:d9:45:0c:69:52:36:ca:1c:10: 98:5f:a0:79:34:0f:fc:5c:df:79:d1:5d:d9:1b:20: 36:1f:b0:c2:4a:14:b6:2c:81:10:be:8c:11:21:3f: 89:4a:fd:28:5a:7c:af:dc:49:a9:84:ba:2e:a4:67: af:f0:76:c4:5b:1a:af:c6:52:89:f3:b1:3c:4e:a2: 09:80:8c:a5:01:d0:d9:f5:29:06:dd:46:ca:1a:d7: 8f:7f:07:e7:dd:08:ca:e8:aa:96:6c:a7:61:ee:36: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:D4:28:7C:73:EC:0D:16:5B:0E:D6:5C:B2:1D:89:F3:0F:3D:7A X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RdXUKHxz7A0WWw7WXLIdifMPPXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.100.0/24 Signature Algorithm: sha256WithRSAEncryption 04:af:36:ad:25:06:b5:ea:ff:59:10:48:24:2c:dc:54:fd:8b: 4f:a7:c1:de:df:8c:bd:6c:47:fd:61:02:8a:b2:d4:98:26:f9: aa:9b:d9:16:46:4e:f3:0a:14:95:99:13:a2:d1:cc:7b:32:a4: e2:ac:59:3d:ca:09:49:b5:92:3e:e8:a4:ab:00:43:4d:a4:d0: e5:b1:07:d6:8c:15:c1:20:64:5a:1d:51:6d:92:f9:90:2d:ad: 4b:1b:a5:ff:f6:49:7f:95:2f:ed:57:e8:14:82:9b:05:f6:f7: 04:50:d5:5b:eb:c3:c4:c7:d9:e2:d6:ed:1b:6c:e7:5a:55:43: 1d:6f:9f:5f:0d:90:f8:4c:12:9d:5f:ca:42:60:9c:f5:f6:05: a4:89:eb:33:5c:48:cb:7f:6a:43:4d:f1:35:48:de:a0:ab:bf: fd:17:1d:1a:59:09:ce:98:38:d8:ec:87:09:d9:da:83:8d:99: ed:f2:ca:7e:f3:90:f4:2b:ca:c9:b6:3b:d4:50:32:ee:c0:cd: c7:5f:e7:5c:ce:47:3c:42:45:8b:6f:6d:d1:44:c5:9e:78:cd: c5:4b:30:ec:a0:83:73:f2:79:6c:9e:c4:e9:7f:ec:bb:a2:75: ab:af:17:4b:0f:e9:6e:3b:d5:b4:9e:27:cf:00:d8:39:d4:98: 9a:3a:19:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hR8LSjD25iedHQiHZTkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWQ1ZDQyODdjNzNlYzBkMTY1YjBlZDY1Y2IyMWQ4OWYzMGYzZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaJFvCvsoUbk/keD+txuW7Q4dbqK JmVLDA9V5v6ote48qnLDXdnIB2G4zlN6SEQxbrmpz/zAj0S79wOXtkRMZrT+EGnX ZCXhcKdpDMXWgh58i6Q37W+IClUrKxqffoctHCun4anLpI7mbcIlWXJ3If1dB6xx y/gV7fRKRqvrWaWLmo6uWy1gafXXlqiyGZ0+M8kx2PBwRkQIpWHZRQxpUjbKHBCY X6B5NA/8XN950V3ZGyA2H7DCShS2LIEQvowRIT+JSv0oWnyv3EmphLoupGev8HbE WxqvxlKJ87E8TqIJgIylAdDZ9SkG3UbKGtePfwfn3QjK6KqWbKdh7jbb3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXV1Ch8c+wNFlsO1lyyHYnzDz16MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUmRYVUtIeHo3QTBXV3c3V1hMSWRpZk1QUFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXapkMA0G CSqGSIb3DQEBCwUAA4IBAQAErzatJQa16v9ZEEgkLNxU/YtPp8He34y9bEf9YQKK stSYJvmqm9kWRk7zChSVmROi0cx7MqTirFk9yglJtZI+6KSrAENNpNDlsQfWjBXB IGRaHVFtkvmQLa1LG6X/9kl/lS/tV+gUgpsF9vcEUNVb68PEx9ni1u0bbOdaVUMd b59fDZD4TBKdX8pCYJz19gWkieszXEjLf2pDTfE1SN6gq7/9Fx0aWQnOmDjY7IcJ 2dqDjZnt8sp+85D0K8rJtjvUUDLuwM3HX+dczkc8QkWLb23RRMWeeM3FSzDsoINz 8nlsnsTpf+y7onWrrxdLD+luO9W0nifPANg51JiaOhkP -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:00 2026 by rpki-client